CISO Tribune

Vendor comparison · 2 companies

Entrust vs Keyfactor

Entrust sells identity-centric security products, including a Cryptographic Security Platform, public key infrastructure, hardware security modules, key and secrets management, identity verification and card issuance systems. Keyfactor sells products that give security teams visibility and control over the identities and cryptography that secure every digital interaction. CISO Tribune files both under Machine identity and PKI. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Entrust
  • Keyfactor
Entrust vs Keyfactor: Products, Customers and Funding Compared
EntrustEntrust sells identity-centric security products, including a Cryptographic Security Platform, public key infrastructure, hardware security modules, key and secrets management, identity verification and card issuance systems.entrust.comKeyfactorKeyfactor sells products that give security teams visibility and control over the identities and cryptography that secure every digital interaction.keyfactor.com
What it sells
  • Cryptographic Security Platform[2][4][8]Entrust says the platform unifies PKI, HSMs, certificate lifecycle management, and key and secrets management.
  • Certificate Manager[9]Entrust Certificate Manager discovers, inventories, monitors, and automates certificates.
  • Hardware Security Modules[4]Entrust nShield HSMs move keys out of software and into tamper-resistant hardware.
  • Identity Verification[4][5][13][20]Entrust Identity Verification is built on Onfido technology.
  • Card Issuance Systems[10]Entrust's Card Issuance Systems provide personalized, high-volume issuance across government and financial markets.
  • CloudControl[10]Entrust CloudControl provides unified security and visibility across hybrid clouds.
  • Keyfactor AgileSec[7]Keyfactor AgileSec helps discover cryptography, understand where it is used, and identify hidden vulnerabilities.
  • Keyfactor Command[5][9]Keyfactor Command is a Certificate Lifecycle Management tool.
  • Keyfactor Command for IoT[5]Keyfactor Command for IoT is an IoT Identity Platform for manufacturers.
  • EJBCA Enterprise[10]EJBCA Enterprise is a complete PKI platform.
  • SignServer[10]SignServer is an API-driven signing engine.
Categories
Headquarters
Minneapolis, United States[3]Independence, United States
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesPrivately held[2][4][9][14]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • September 22, 2026Entrust announced a partnership with The Cyber Helpline to support victims of cybercrime and online fraud in recovering.[6]
  • July 14, 2026Entrust announced the Agentic AI Trust Accelerator, a co-development program for enterprises and integration partners working on trust infrastructure for autonomous AI.[18]
  • May 13, 2026Entrust appointed Adam Dimopoulos as its Chief Information Security Officer.[17]
  • April 29, 2026Entrust announced a collaboration with IBM Consulting to help enterprises govern their cryptography and transition toward quantum-safe security.[19]
  • February 9, 2026Entrust announced a strategic collaboration with Google on identity verification and AI-driven security.[20]
  • November 4, 2026Keyfactor appointed Gerald Beuchelt as its Chief Information Security Officer.[12]
  • September 9, 2026Keyfactor said it exceeded 200 million dollars in annual recurring revenue at the beginning of Q3 2026.[11]
  • July 27, 2026Keyfactor announced its intent to acquire Cofide, a UK-based identity platform for software workloads and AI agents.[13]
  • July 6, 2026Keyfactor announced a growth investment of over 1 billion dollars from Summit Partners.[2]
G2 and Gartner Peer Insights
  • G2: listed, seen November 5, 2026[21]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[14]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Entrust sells mainly to governments, financial institutions, and enterprises. Entrust names telecom providers, healthcare organizations, schools, and gig economy and platform businesses among the industries it serves. Entrust names security and compliance teams as users of its key management solutions.Keyfactor addresses manufacturers that need to build high-assurance identity into connected devices across the device lifecycle. Keyfactor describes automotive OEMs and suppliers as needing to ensure that every vehicle and charging component has identity-first security. Keyfactor describes security for smart grids, manufacturing facilities, and energy and utilities infrastructure. Keyfactor offers deployment on-prem, in the cloud, and in a Kubernetes cluster.
Last verified
September 27, 2026November 9, 2026

Where they overlap

  • Machine identity and PKI is the primary category of both Entrust and Keyfactor.
  • Both are headquartered in the United States.

Where they differ, field by field

  • Entrust lists Cryptographic Security Platform, Certificate Manager, Hardware Security Modules, Identity Verification, Card Issuance Systems and 1 more. Keyfactor lists Keyfactor AgileSec, Keyfactor Command, Keyfactor Command for IoT, EJBCA Enterprise and SignServer.
  • Entrust is headquartered in Minneapolis, United States. Keyfactor is headquartered in Independence, United States.
  • Keyfactor is privately held.

How they differ

CISO Tribune files both Entrust and Keyfactor under Machine identity and PKI as their primary category. Entrust is headquartered in Minneapolis, United States, and Keyfactor is headquartered in Independence, United States. Keyfactor is privately held, and on July 6, 2026 it announced a growth investment of over 1 billion dollars from Summit Partners.

Entrust sells a Cryptographic Security Platform that it says unifies PKI, HSMs, certificate lifecycle management, and key and secrets management. Its other products include Certificate Manager, nShield Hardware Security Modules, Identity Verification built on Onfido technology, Card Issuance Systems, and CloudControl. Entrust names governments, financial institutions, and enterprises as its main buyers. Keyfactor sells AgileSec for discovering cryptography, Command for certificate lifecycle management, Command for IoT, EJBCA Enterprise as a PKI platform, and SignServer as a signing engine. Keyfactor addresses manufacturers that need identity built into connected devices, and it describes automotive OEMs and suppliers among those needing identity-first security. Both companies offer certificate lifecycle tooling and PKI that can run on-premises or in the cloud.

Entrust also announced a collaboration with IBM Consulting on April 29, 2026. Keyfactor said on September 9, 2026 that it exceeded 200 million dollars in annual recurring revenue at the beginning of Q3 2026. On July 27, 2026, Keyfactor announced its intent to acquire Cofide, a UK-based identity platform for software workloads and AI agents.

What it sells: Entrust

What Cryptographic Security Platform does[2][4][8]
Entrust says the Cryptographic Security Platform provides centralized visibility, governance, and automation. Entrust says deployment is on premises or as a cloud-based service. The platform provides cryptographic inventory, CBOM support, and policy control.
What Certificate Manager does[9]
Entrust Certificate Manager works across hybrid environments and multi-CA ecosystems. Entrust says it can issue, renew, and revoke certificates across Entrust and third-party CAs from a single control point. Certificate Manager can be deployed across on-prem, private, and public cloud environments.
What Hardware Security Modules does[4]
Entrust says nShield HSMs are FIPS 140-2 and 140-3 certified. Entrust says they can be deployed on-premises, in the cloud, or hybrid. Entrust offers subscription-based access to dedicated nShield HSMs for cloud-based cryptographic services.
What Identity Verification does[4][5][13][20]
Entrust says the solution supports KYC, AML, eIDAS 2.0, and other regulatory requirements. Organizations can design drag-and-drop verification workflows and validate identities using biometrics, documents, and trusted data sources. The solution integrates with Microsoft Entra ID and works within Okta workflows.

What it sells: Keyfactor

What Keyfactor AgileSec does[7]
Keyfactor AgileSec deploys sensors to scan code, servers, endpoints, cloud workloads, and real-time network traffic. Keyfactor AgileSec is offered as AgileSec SaaS, hosted by Keyfactor, or as a self-hosted deployment. Keyfactor AgileSec integrates with CLM, GRC, ITSM, and CMDB platforms to support workflow-driven remediation.
What Keyfactor Command does[5][9]
Keyfactor Command finds every certificate, including hybrid and PQ certificates, using real-time CA synchronization, network scanning, and agent-based or agentless discovery of key and trust stores. Keyfactor Command uses modular orchestrators to provision certificates directly to network endpoints, load balancers, servers, and cloud workloads. Keyfactor Command can be deployed on-prem, in the cloud, in a Kubernetes cluster, and combined with fully managed PKI.
What Keyfactor Command for IoT does[5]
Keyfactor Command for IoT signs firmware and delivers over-the-air (OTA) software updates to a fleet of devices. Keyfactor Command for IoT manages encryption keys and digital certificates from generation and enrollment to provisioning, renewal, and revocation.
What EJBCA Enterprise does[10]
EJBCA Enterprise is a complete PKI platform. Keyfactor describes EJBCA Enterprise for use in modern manufacturing environments.
What SignServer does[10]
SignServer enables signing in virtually any format. Keyfactor describes SignServer as supporting complex manufacturing environments.

Questions about Entrust and Keyfactor

What do Entrust and Keyfactor sell?
Entrust sells Cryptographic Security Platform, Certificate Manager, Hardware Security Modules, Identity Verification, Card Issuance Systems and 1 more. Keyfactor sells Keyfactor AgileSec, Keyfactor Command, Keyfactor Command for IoT, EJBCA Enterprise and SignServer.
Are Entrust and Keyfactor in the same category?
Yes. Machine identity and PKI is the primary category of both on CISO Tribune.
Where are Entrust and Keyfactor headquartered?
Entrust is headquartered in Minneapolis, United States. Keyfactor is headquartered in Independence, United States.
Who owns Entrust and Keyfactor?
Keyfactor is privately held.
Who are Entrust and Keyfactor sold to?
From its own pages, Entrust sells mainly to governments, financial institutions, and enterprises. Keyfactor addresses manufacturers that need to build high-assurance identity into connected devices across the device lifecycle.
What have Entrust and Keyfactor announced recently?
September 22, 2026: Entrust announced a partnership with The Cyber Helpline to support victims of cybercrime and online fraud in recovering. November 4, 2026: Keyfactor appointed Gerald Beuchelt as its Chief Information Security Officer.

About Entrust

Entrust sells identity-centric security products, including a Cryptographic Security Platform, public key infrastructure, hardware security modules, key and secrets management, identity verification and card issuance systems. Entrust says its cryptographic security works to reduce risk, protect sensitive data, and enable compliance at scale, from verified onboarding and card issuance to trusted access and transactions.[1][2][5]

Entrust says its Cryptographic Security Platform unifies PKI, HSMs, certificate lifecycle management, and key and secrets management in a cryptographic trust layer for centralized visibility, governance, and automation. Entrust says deployment is on premises or as a cloud-based service. Entrust says the platform provides cryptographic inventory, CBOM support, and policy control to plan and govern algorithm transitions. The Entrust Cryptographic Security Platform enables organizations to discover, own, and govern cryptographic assets wherever their data lives. The platform's compliance management capability inventories cryptographic assets, imports and exports CBOMs, applies policy frameworks, and monitors risk and compliance posture from a unified dashboard.[8]

Entrust Certificate Manager is a platform that discovers, inventories, monitors, and automates certificates across hybrid environments and multi-CA ecosystems. Entrust says Certificate Manager can issue, renew, and revoke certificates across Entrust and third-party CAs from a single control point. Certificate Manager covers discovery, audit, issuance, renewal, and revocation of certificates. Entrust says Certificate Manager delivers automated lifecycle management that scales with 47-day certificate lifecycles and growing machine identities. Certificate Manager can be deployed across on-prem, private, and public cloud environments. Entrust offers on-premises, cloud, or hybrid PKI solutions. Entrust IoT Security allows organizations to secure IT and OT devices through scalable machine and user identity management.[5][10]

The Entrust Cryptographic Security Platform Key Manager, formerly KeyControl, is a keys and secrets management solution that combines key lifecycle management with a decentralized, vault-based architecture. Entrust says Key Manager automates the lifecycle of encryption keys, including key storage, backup, distribution, rotation, and key revocation. Entrust says BYOK and HYOK integrations with CSP Key Manager reduce reliance on cloud provider trust models. Entrust says Key Manager acts as a universal key management server for KMIP-compatible virtualized environments. Entrust says security and compliance teams use its solutions to centralize key control and enforce encryption policies.[11]

Entrust says nShield HSMs move keys out of software and into tamper-resistant hardware. Entrust states that over 100,000 Entrust nShield HSMs are deployed globally across government, financial, and technology organizations with 150+ partner integrations. Entrust says the modules are FIPS 140-2 and 140-3 certified, and that nShield HSMs can be deployed on-premises, in the cloud, or hybrid. Entrust says its Security World architecture enables unlimited key storage without traditional HSM complexity. Entrust offers subscription-based access to dedicated nShield HSMs for cloud-based cryptographic services.[10][12]

Entrust says Entrust Identity Verification is built on Onfido technology. Entrust says its identity verification supports KYC, AML, eIDAS 2.0, and other regulatory requirements. Entrust Identity Verification lets organizations design drag-and-drop verification workflows and validate identities using biometrics, documents, and trusted data sources. Entrust Identity Verification integrates with Microsoft Entra ID. Entrust adds identity verification within Okta workflows to determine when additional verification is required.[5][13]

Entrust's Card Issuance Systems provide personalized, high-volume issuance across government and financial markets. Entrust offers a cloud-based IAM solution with multi-factor authentication (MFA), credential-based passwordless access, and SSO. Digital and electronic signature solutions from Entrust help establish trusted identities and ensure authenticity for digital documents, emails, code, and mobile devices. Entrust CloudControl provides unified security and visibility across hybrid clouds.[10]

Entrust's Cryptographic Center of Excellence helps organizations move from awareness to action on post-quantum readiness. Entrust offers PQ readiness assessments, tools, and direct access to Entrust experts. Entrust says its PKI and HSMs support the NIST standardized PQC algorithms, and that its solutions support a hybrid approach combining today's algorithms with PQC. Entrust says its solutions facilitate more than 400 government programs in over 100 countries. Entrust says it has been securing identities for nearly 60 years.[5][10][12][14][15][16]

Entrust on the record

Sources

Entrust full record

  1. [1]entrust.comEntrust · entrust.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Entrust announces industrys first unified cryptographic security platformEntrust · entrust.com · published April 16, 2025 · Tier A
  3. [3]ContactEntrust · entrust.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]Identity and Data Security Solutions by Industry | EntrustEntrust · undated page, accessed October 24, 2026 · Tier A
  5. [5]Entrust | Comprehensive Identity-Centric Security SolutionsEntrust · undated page, accessed October 24, 2026 · Tier A
  6. [6]Entrust Partners with The Cyber Helpline to Expand Support for Victims of Fraud and CybercrimeBusiness Wire · published September 22, 2026 · Tier A
  7. [7]Entrust IDV, formerly Onfido Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 24, 2026 · Tier C
  8. [8]Cryptographic Security Platform | EntrustEntrust · undated page, accessed November 5, 2026 · Tier A
  9. [9]Certificate Lifecycle Management Solution | EntrustEntrust · undated page, accessed November 5, 2026 · Tier A
  10. [10]All Products | EntrustEntrust · undated page, accessed November 5, 2026 · Tier A
  11. [11]Encryption Key Management Solutions for Data Security | EntrustEntrust · undated page, accessed November 5, 2026 · Tier A
  12. [12]Hardware Security Modules (HSMs) Solutions | EntrustEntrust · undated page, accessed November 5, 2026 · Tier A
  13. [13]Identity Verification (IDV) Solutions | EntrustEntrust · undated page, accessed November 5, 2026 · Tier A
  14. [14]Post-Quantum Cryptography (PQC) Solutions and Services Provider | EntrustEntrust · undated page, accessed November 5, 2026 · Tier A
  15. [15]Identity-Centric Security Solutions | EntrustEntrust · undated page, accessed November 5, 2026 · Tier A
  16. [16]AI Security Solutions for the Age of AI | EntrustEntrust · undated page, accessed November 5, 2026 · Tier A
  17. [17]Entrust Appoints Adam Dimopoulos As Chief Information Security OfficerEntrust · published May 13, 2026 · Tier A
  18. [18]Entrust Launches the Agentic AI Trust Accelerator to Help Enterprises Move AI Agents From Pilot to ProductionEntrust · published July 14, 2026 · Tier A
  19. [19]Entrust Announces Collaboration With IBM to Help Enterprises Modernize Cryptography Security Posture and Make the Transition Toward Quantum-Safe SecurityEntrust · published April 29, 2026 · Tier A
  20. [20]Google and Entrust Announce Partnership to Advance AI-Powered Identity Verification, Fraud Monitoring, and AnalyticsEntrust · published February 9, 2026 · Tier A
  21. [21]Entrust Identity as a Service Reviews & Product Details - G2G2 · undated page, accessed November 5, 2026 · Tier C

Keyfactor full record

  1. [1]keyfactor.comKeyfactor · keyfactor.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Keyfactor Announces $1B+ Strategic Growth Investment Led By Summit Partners to Expand Leadership in Securing the AI and Post-Quantum EnterpriseKeyfactor · undated page, accessed September 27, 2026 · Tier A
  3. [3]Privacy policyKeyfactor · keyfactor.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]Trust Infrastructure for AI & Machines - KeyfactorKeyfactor · undated page, accessed October 26, 2026 · Tier A
  5. [5]IoT Identity Platform | KeyfactorKeyfactor · undated page, accessed October 26, 2026 · Tier A
  6. [6]About KeyfactorKeyfactor · undated page, accessed November 10, 2026 · Tier A
  7. [7]Cryptographic Discovery and Inventory | KeyfactorKeyfactor · undated page, accessed November 10, 2026 · Tier A
  8. [8]Cryptographic Posture Management (CPM) | KeyfactorKeyfactor · undated page, accessed November 10, 2026 · Tier A
  9. [9]Keyfactor Command | PKI & Machine Identity AutomationKeyfactor · undated page, accessed November 10, 2026 · Tier A
  10. [10]Automotive Cybersecurity: Protecting Connected Cars and Driver Safety | KeyfactorKeyfactor · undated page, accessed November 10, 2026 · Tier A
  11. [11]Keyfactor Exceeds $200 Million in ARR as Global Demand for Digital Trust Infrastructure AcceleratesKeyfactor · published September 9, 2026 · Tier A
  12. [12]Keyfactor Appoints Gerald Beuchelt as Chief Information Security OfficerKeyfactor · published November 4, 2026 · Tier A
  13. [13]Keyfactor Announces Intent to Acquire Cofide to Bring Verified Identity to AI Agents and Cloud WorkloadsKeyfactor · published July 27, 2026 · Tier A
  14. [14]Keyfactor Command Reviews 2026G2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.